REMARKS 

Claims 2 and 3 are now pending. 

Applicants respectfully request reconsideration of the present application in view 
of this response. 

The Specification was objected to for not including a detailed description of the 
drawing. In fact, Applicants' Preliminary Amendment filed on December 26, 2000 
included a Substitute Specification (and Marked - up version of the Substitute 
Specification) which included a detailed description of the drawing on page 6. For the 
Examiner's convenience, a reprinted copy of the Substitute Specification is attached 
hereto. Accordingly, Applicants respectfully request a withdrawal of the objection to the 
Specification of Record. 

The Drawing was objected to for blocks 102 and 103. Applicants respectfully 
submit that there is not block 103 in Applicants' drawing or specification. Applicants 
have amended the Drawing (Fig. 1). No new matter has been added. The Specification 
has been amended in correspondence with the amendments to the Drawing. No new 
matter has been added. Applicants respectfully request that the Drawing be found 
allowable and any objections be withdrawn. 

Claims 2 and 3 were rejected under 35 U.S.C. § 102(e) as anticipated by U.S. 
Patent No. 6,289,502 to Garland et al. ("Garland reference"). 

The Garland reference purportedly concerns a computer language which is based 
on a formal mathematical state-machine model and used both to validate and to generate 
code for a distributed system, and includes constructs for specifying non-deterministic 
actions, and for specifying constraints on those non-deterministic choices. Abstract. The 
Garland reference further recites that sub-languages to the model are used to specify the 
input of some tools, i.e., some code generators. Abstract. The Garland reference further 
states that the method involves accepting a design specification for the distributed system, 
and applying a validation procedure to the design specification to verify that the system 
has desired properties, the validation including applying a theorem proving procedure to 
the design specification and applying a code generating procedure to the specification to 
generate multiple software implementations for components of the distributed system. 
Abstract. 
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The Garland reference does not teach identically all of the features of the present 
invention as detailed in claim 2. Claim 2 concerns a method for verifying safety 
properties of a Java byte code program, the method comprising each of the following 
steps: 

mapping a functioning of the byte code program by a potentially infinite state 
transition system onto a finite state transition system using an algorithm describing first 
properties of byte code instructions, 

mapping a state space of an interpreter onto a finite set of states in the finite state 
transition system, information not needed for a checking of an acceptability of the byte 
code program being omitted, so that the finite state transition system contains only type 
information useable for the checking of the acceptability of the byte code program; 

entering the type information useable for the checking of the acceptability of the 
byte code program into a model checker; 

determining second properties which characterize an acceptable byte code 
program using a logic operation including formulas; 

entering the determined second properties which characterize an acceptable byte 
code program as conditional set into the model checker, the conditional set including a 
plurality of individual conditions; 

interpreting, using the model checker, each of the plurality of individual 
conditions as a specification language for system properties of the byte code program; 

verifying, using the model checker, whether each of the plurality of individual 
conditions is fulfilled by the state transition system; and then 

automatically releasing the byte code program for further processing when the 
state transition system fulfills all of the plurality of individual conditions. The Garland 
reference does not identically disclose the above exact method. In addition, the Garland 
reference does not identically describe the steps of verifying, using the model checker, 
whether each of the plurality of individual conditions is fulfilled by the state transition 
system; and then automatically releasing the byte code program for further processing 
when the state transition system fulfills all of the plurality of individual conditions, as in 
claim 2. The passages cited by the Examiner do not appear to identically address these 
features of claim 2. 
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Accordingly, the Garland reference does not identically describe all of the features 
of claim 2 and Applicants respectfully request withdrawal of the rejection under 35 U.S.C. 
§ 102(e) of claim 2 and its dependent claim 3. 

In summary, it is respectfully submitted that both claims 2 and 3 are allowable for 
the foregoing reasons. 



In view of the foregoing, it is believed that the objections to the Specification and 
Drawings, and rejections of the claims have been obviated, and that claims 2 and 3 are 
allowable. It is therefore respectfully requested that the objections and rejections be 
withdrawn, and that the present application issue as early as possible. 

Should the Examiner wish to discuss the present application, the Examiner is 
invited to contact the undersigned at any time. 



CONCLUSION 



Dated 



: Qj&l&^^a& j By? 




Richard L. Mayer 
(Reg. No. 22,490) 



KENYON & KENYON 
One Broadway 
New York, New York 10004 
(212) 425-7200 



CUSTOMER NO. 26646 
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AMENDMENTS TO THE DRAWINGS: 

The attached sheet of drawings includes changes to Fig. 1 . The sheet of Fig. 1 
replaces the original sheet of Fig. 1 . No new matter has been added. 



Attachment(s): Replacement Sheet (Fig. 1) 

Annotated Sheet Showing Changes (Fig. 1) 
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transition system, information not needed for a checking of an acceptability of the byte 
code program being omitted, so that the finite state transition system contains only type 
information useable for the checking of the acceptability of the byte code program 
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code program into a model checker 



determining second properties which characterize an acceptable byte code program 
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entering the determined second properties which characterize an acceptable byte code 
program as conditional set into the model checker, the conditional set including a 
plurality of individual conditions 
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interpreting, using the model checker, each of the plurality of individual conditions- as a 
specification language for system properties of the byte code program 



verifying, using the model checker, whether each of the plurality of individual conditions 
is fulfilled by the state transition system 



automatically releasing the byte code program for further processing wftien the state 
transition system fulfills all of the plurality of individual conditions 
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